Data stolen from 5,000 patients

Flash drives containing personal data stolen from employee's vehicle

ESCONDIDO  About 5,000 patients of Palomar Health had personal information — including medical diagnoses — stolen last month when someone swiped a company laptop and two flash drives from an employee’s SUV, a company official announced Friday.

The inland North County health care system is reaching out to patients affected by the late February theft of the items, spokeswoman Bobette Brown said. Palomar Health runs Palomar Medical Center in Escondido and Pomerado Hospital in Poway.

The laptop was encrypted, but the two flash drives were not, Brown said.

Oceanside police recovered the laptop last week, and on Friday may have found the missing flash drives during a search of a home in Vista. One person was arrested, and at least one more arrest may follow in the coming days, police Sgt. Matt Cole said.

The flash drives contained the personal information of more than 5,000 patients, including their names, dates of birth, and information related to their diagnoses, treatments and insurance. It also included 36 Medicare identification numbers. Neither medical records nor financial information were on the stolen flash drives, Brown said.

The theft affected only certain patients treated by the health care system since 2008, according to Brown.

As of Friday, Palomar Health had no reports that any of the stolen data had been used.

Kim Jackson, privacy officer for Palomar Health, said the company has been working with staffers to help prevent a similar type of incident, and is taking a fresh look at methods to ensure safeguards to patient privacy.

“Palomar Health takes this matter very seriously and is committed to protecting patient privacy, and we deeply regret any inconvenience this may have caused our patients,” Jackson said.

Brown said the employee had taken the laptop and flash drives home to do work after-hours. She declined to comment on what disciplinary action, if any, was taken with the employee.

The theft happened late Feb. 21 or early Feb. 22 from the employee’s SUV, parked at their home in east Oceanside.

On March 17, a tracking device led police to the computer at the home of a person who had bought it, not knowing it was a stolen item, Cole said.

Further investigation led police on Friday to search the Vista home of a woman believed to be tied to the sale of the stolen computer. The woman, identified as Jasmine Baker, 24, was arrested on suspicion of possession of stolen property. A second suspect also may be arrested, Cole said.

During the search of Baker’s home, police found what they suspect may be the missing flash drives. They also found other items suspected to be stolen property, Cole said.

After learning of the theft last month, Palomar Health hired an outside firm to reconstruct the information on the flash drives. That work was completed on Monday, and the hospital began reaching out to the affected patients Friday.

Patients affected by the theft can reach the health care system for more information and help at (866) 313-7993. The company is offering credit monitoring to those whose Medicare numbers were stolen.